ASoC: Intel: sof_sdw: handle errors on card registration (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.26 % · percentile 18 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: handle errors on card registration If the card registration fails, typically because of deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver bind/unbind tests. We already clean-up the device properties when the card is removed, this code can be moved as a helper and called upon card registration errors.
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-54615
- GCVE · GCVE-0-2022-49617
CERT-FR advisories
- CERTFR-2025-AVI-0336 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0307 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0252 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.7 < 5.15.56cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 5.18.13cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 52db12d193d45728e738df6119702cba08fd46a2 < f2556ce6b35ae0fc72000a4daa21ded12665e2f2 ; affected 52db12d193d45728e738df6119702cba08fd46a2 < 09bca0ffc95c50369f1345d80ecfaca51864126f ; affected 52db12d193d45728e738df6119702cba08fd46a2 < fe154c4ff376bc31041c6441958a08243df09c99 |
| Linux · Linux | affected 5.7 ; unaffected 0 < 5.7 ; unaffected 5.15.56 ≤ 5.15.* ; unaffected 5.18.13 ≤ 5.18.* ; unaffected 5.19 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |